git (1:2.55.0-1ubuntu1) stonking; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 04 Aug 2026 12:18:43 +0200

git (1:2.55.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.54.0.adoc, 2.55.0.adoc).
  * debian/rules: disable Rust for now.

 -- Jonathan Nieder <jrnieder@gmail.com>  Sun, 02 Aug 2026 16:39:03 +0200

git (1:2.53.0-1ubuntu1) resolute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 02 Mar 2026 18:55:34 +0100

git (1:2.53.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.52.0.adoc, 2.53.0.adoc).
  * debian/control: Standards-Version: 4.7.2.  The main relevant
    change is that packages may not break (but are permitted to
    error out when asked to display documentation) when manpages
    are not present; "git help" already fulfills this requirement by
    passing on the message for a missing page from "man" to the
    caller.

 -- Jonathan Nieder <jrnieder@gmail.com>  Sun, 01 Mar 2026 22:31:10 +0100

git (1:2.51.0-1ubuntu1) questing; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 28 Aug 2025 09:15:03 +0200

git (1:2.51.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.51.0.adoc).
  * debian/rules: remove git-mediawiki package, removed upstream.
  * debian/rules, debian/git.install, debian/git.links: remove
    references to contrib/emacs and contrib/hooks.
  * update debian/copyright.

 -- Jonathan Nieder <jrnieder@gmail.com>  Tue, 26 Aug 2025 16:36:40 +0200

git (1:2.50.1-0.1ubuntu2) questing; urgency=medium

  * Enable again full tests

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 20 Aug 2025 23:24:28 +0200

git (1:2.50.1-0.1ubuntu1) questing; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.
    - ignore some tests

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Fri, 01 Aug 2025 13:53:32 +0200

git (1:2.50.1-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release.
    - CVE-2025-27613: gitk: file creation/truncation after cloning
      untrusted repository
    - CVE-2025-27614: gitk: user can be tricked into running any
      script after cloning untrusted repository
    - CVE-2025-46835: git-gui: file creation/overwriting after
      cloning untrusted repository
    - CVE-2025-48384: script execution after cloning untrusted
      repository
    - CVE-2025-48385: protocol injection when fetching
    - Closes: #1108983

 -- Adrian Bunk <bunk@debian.org>  Tue, 29 Jul 2025 20:54:28 +0300

git (1:2.50.0-1ubuntu6) questing; urgency=medium

  * Ignore again some tests

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 22 Jul 2025 11:00:49 +0200

git (1:2.50.0-1ubuntu4) questing; urgency=medium

  * Revert Disable some tests for now (See lp: 2115804), related
    to coreutils

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 14 Jul 2025 12:01:03 +0200

git (1:2.50.0-1ubuntu3) questing; urgency=medium

  * SECURITY UPDATE: Code execution and file manipulation when cloning
    malicious repositories.
    - debian/patches/CVE-2025-27613.patch: Add argument sanitizing and replace
      command instances with safe versions in gitk-git/gitk.
    - debian/patches/CVE-2025-27614.patch: Remove escape_filter_paths and wrap
      concat instances with list in gitk-git/gitk.
    - CVE-2025-27613
    - CVE-2025-27614
  * SECURITY UPDATE: File overwrite when editing a file in a malicious
    directory in an untrusted repository.
    - debian/patches/CVE-2025-46835-pre1.patch: Remove windows specific code
      in git-gui/git-gui.sh.
    - debian/patches/CVE-2025-46835.patch: Add argument sanitizing, replace
      command instances with safe versions, and wrap instances with list in
      git-gui/git-gui.sh and other files in git-gui directory.
    - CVE-2025-46835
  * SECURITY UPDATE: Unintentional script execution due to improperly stripped
    carriage return.
    - debian/patches/CVE-2025-48384.patch: Add carriage return checks in
      config.c.
    - CVE-2025-48384
  * SECURITY UPDATE: Protocol injection potentially leading to arbitrary code
    execution.
    - debian/patches/CVE-2025-48385.patch: Add URI and filename checks in
      bundle-uri.c.
    - CVE-2025-48385
  * SECURITY UPDATE: Buffer overflow.
    - debian/patches/CVE-2025-48386.patch: Add target_append function and
      change wcsncat calls to target_append in
      contrib/credential/wincred/git-credential-wincred.c.
    - CVE-2025-48386

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 08 Jul 2025 15:34:40 -0230

git (1:2.50.0-1ubuntu2) questing; urgency=medium

  * Disable some tests for now (See lp: 2115804), related
    to coreutils

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 03 Jul 2025 12:08:50 +0200

git (1:2.50.0-1ubuntu1) questing; urgency=low

  * Merge from Debian Unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 02 Jul 2025 09:29:48 +0200

git (1:2.50.0-1) unstable; urgency=medium

  * new upstream release (see RelNotes/2.50.0.adoc).
    * in particular, includes the rest of the parse-options fix
      from upstream, avoiding size mismatches that on big-endian
      64-bit platforms was causing commands like "git grep -A" to
      write their argument to the 32 bits after the variable that is
      used (thx Sebastian Andrzej Siewior; closes: #1106786).
  * debian/patches/*: remove; applied upstream.

 -- Jonathan Nieder <jrnieder@gmail.com>  Tue, 17 Jun 2025 03:50:38 +0200

git (1:2.49.0-2) unstable; urgency=medium

  * debian/rules: remove overly strict check for license file
    content matching base-files.  This unbreaks the build on
    builders with an updated copy of the GPLv2 text (thx
    Santiago Vila; closes: #1106311).
  * debian/patches/0001-parse-options-...diff: new; use correct
    type for writing size_t flags, avoiding errors on big-endian
    64-bit platforms (thx Matthias Klose, Bastian Blank, and
    Pranav P; closes: #1102106).

 -- Jonathan Nieder <jrnieder@gmail.com>  Thu, 29 May 2025 17:33:17 +0200

git (1:2.49.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.48.0.adoc, RelNotes/2.49.0.adoc).
  * update debian/copyright.
  * debian/rules: adjust for asciidoc files using .adoc suffix.
  * debian/control: Standards-Version: 4.7.0.
  * debian/git-doc.doc-base.*: remove, as these metadata were not
    frequently used and were out of date.

 -- Jonathan Nieder <jrnieder@gmail.com>  Sat, 15 Mar 2025 18:48:53 +0100

git (1:2.48.1-0ubuntu1) plucky; urgency=medium

  * New upstream release.
  * Merge from Debian Unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Mon, 10 Feb 2025 22:31:34 -0600

git (1:2.47.2-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * new upstream release (see Documentation/RelNotes/2.47.2.txt; addresses
    CVE-2024-50349 and CVE-2024-52006; Closes: #1093042).

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 19 Jan 2025 09:06:17 +0100

git (1:2.47.1-1ubuntu1) plucky; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Thu, 02 Jan 2025 16:13:14 -0600

git (1:2.47.1-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.46.0.txt, RelNotes/2.47.0.txt).
  * new upstream point release (see RelNotes/2.47.1.txt).
  * remove unsafe and under-maintained packages that install an
    unsecured git-daemon services (thx Chris Hofstaedtler; closes:
    #1078778, #1020284).

 -- Jonathan Nieder <jrnieder@gmail.com>  Thu, 02 Jan 2025 13:12:25 +0100

git (1:2.45.2-1.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Revert my two previous NMUs as I don't have the time to fully clean
    up the situation. Reopens: #1020284 #1078778
    Closes: #1088019

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 22 Dec 2024 16:52:50 +0100

git (1:2.45.2-1.2ubuntu1) plucky; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sat, 09 Nov 2024 20:13:05 +0100

git (1:2.45.2-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * git-daemon-run.postinst: Avoid hard failure when update-service
    is not installed yet.
  * git-daemon-run.postrm: stop passing -f to deluser (Closes: #1020284)

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 08 Nov 2024 17:57:18 +0100

git (1:2.45.2-1.1ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 30 Oct 2024 09:42:35 +0100

git (1:2.45.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Demote "runit" dependency to Recommends.
    Demoting Depends: runit to Recommends: should have no effect on default
    installs (apt will install Recommends by default), and people wanting to
    use runit should have it installed already. (Closes: #1078778)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 13 Oct 2024 14:16:01 +0200

git (1:2.45.2-1ubuntu1) oracular; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 18 Jun 2024 20:12:14 +0200

git (1:2.45.2-1) unstable; urgency=low

  * new upstream point release (see RelNotes/2.45.2.txt).
  * debian/patches/*: remove; applied upstream.

 -- Jonathan Nieder <jrnieder@gmail.com>  Sun, 16 Jun 2024 15:40:09 +0000

git (1:2.45.1-1ubuntu1) oracular; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 29 May 2024 08:10:33 +0200

git (1:2.45.1-1) unstable; urgency=medium

  * new upstream release (see RelNotes/2.44.0.txt, RelNotes/2.45.0.txt).
  * new upstream point release (see RelNotes/2.45.1.txt; addresses
    CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021 and
    CVE-2024-32465; closes: #1071160).
  * debian/patches/0001..0007: new from upstream: followups intended
    for v2.45.2 to avoid regressions from the fixes included in
    v2.45.1 (thx Johannes Schindelin).

 -- Jonathan Nieder <jrnieder@gmail.com>  Mon, 20 May 2024 03:36:58 +0000

git (1:2.43.0-1ubuntu7) noble; urgency=high

  * No change rebuild against libcurl3t64-gnutls.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 16:39:51 +0200

git (1:2.43.0-1ubuntu6) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 00:07:01 +0000

git (1:2.43.0-1ubuntu5) noble; urgency=medium

  * Run tests again.

 -- Matthias Klose <doko@ubuntu.com>  Sat, 16 Mar 2024 13:18:21 +0100

git (1:2.43.0-1ubuntu3) noble; urgency=medium

  * Don't run tests for a first build against libcurl3t64-gnutls.

 -- Matthias Klose <doko@ubuntu.com>  Sat, 16 Mar 2024 13:17:23 +0100

git (1:2.43.0-1ubuntu2) noble; urgency=medium

  * No-change rebuild against libcurl3t64-gnutls

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 16 Mar 2024 06:55:53 +0000

git (1:2.43.0-1ubuntu1) noble; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Tue, 28 Nov 2023 10:42:23 -0600

git (1:2.43.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.43.0.txt).

 -- Jonathan Nieder <jrnieder@gmail.com>  Sun, 26 Nov 2023 17:32:42 -0800

git (1:2.42.0-1ubuntu1) noble; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Build diff-highlight in the contrib dir
    - Don't build-depend on subversion on i386, it is not reasonable to
      support on the partial arch.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 19 Nov 2023 21:12:39 -0800

git (1:2.42.0-1) unstable; urgency=low

  * new upstream release (see RelNotes/2.41.0.txt, RelNotes/2.42.0.txt).

 -- Jonathan Nieder <jrnieder@gmail.com>  Wed, 27 Sep 2023 09:55:42 -0700

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog git-doc`.
